Identity and Access Management Advisor

**A workplace powered by you**

At BC Hydro, we’re working towards creating a cleaner and more sustainable future for all British Columbians and need
people like you to help us. A career at BC Hydro is meaningful and provides you the opportunity to be part of a talented,
inclusive, and diverse team. We offer a healthy work-life balance, competitive wages, a comprehensive benefits package,
and training opportunities to support you in your career growth. We're proud to be ranked as one of B.C.'s Top Employers
and one of Canada's Best Diversity Employers.

**Identity and Access Management Advisor**

Number of positions: 1 Job Location: Dunsmuir 08

Employment type: Permanent Region: Lower Mainland

Hours of work: Full-time (37.5 hrs/wk) Flexible Work Role: Hybrid

Annual salary: $ 107,000.00 - 135,300.00

**What you'll do**
- The Identity and Access Management Advisor (IAM Advisor), is responsible for the analysis, implementation, and
maintenance of all components of digital identity, including enrollment and identity proofing, authentication and lifecycle
management, and federation and assertions. They will provide in-depth technical consultation to projects and IT
and architecture. The IAM Advisor will protect BC Hydro’s information assets by ensuring that the right people have access
to the right services at the right time for the right reasons.

IAM (Identity and Access Management) Activities:

- Provides Subject Matter Expertise (SME) for Identity and Access Management (IAM) projects and capabilities, ensuring

alignment with IAM vision and cybersecurity strategies.
- Monitor the day-to-day operational responsibilities related to IAM including single sign-on, authentication, multifactor

authentication (MFA), identity governance, privileged access management, and secrets management.

guidelines.
- Practice continual improvement for IAM practices and participate in activities to identify and implement improvements

including internal measurement KPIs, security practice reviews, and internal/external audits.

Business Strategy:

- Works closely with the business units and staff to ensure consistency when delivering IAM capabilities and outcomes.
- Aligns IAM processes across the organization and contributes to the development of standards.

business users.
- Builds positive working relationships with IAM stakeholders and identifies opportunities to improve engagement.

Service Delivery Oversight:

- Oversees service provider delivered IAM services, ensuring that contractual requirements and service levels are met, and

BC Hydro policies and standard are adhered to.
- Develops, measures, and reports IAM related KPIs

**What you bring**
- Bachelor’s degree in computer science, information systems, cybersecurity, or equivalent combination of education and

experience.
- Identity management training and experience in one or more of the following areas Privilege Access Management (PAM),

Identity Governance and Administration (IGA), and Digital Identity Lifecycle.
- [7+] years of experience in technology implementation and operation, including: [2+] years of experience with IGA systems

and/or directory services, and [2+] years integrating identity management, access management, and access governance
- Preference will be given to applicants with certifications in one or more public cloud platforms and those who are Certified

Information Systems Security Professional (CISSP) and/or Certified Identity Professional (CIDPRO).

Technical and Business Experience:

- Expert understanding of IAM concepts, including federation, authentication, authorization, access controls, access control

attacks, and digital identity lifecycle management.
- Experience with administrating authentication technologies, such as Microsoft Active Directory/Windows authentication,

Azure AD/DS, LDAP, and/or federated identity management.
- Subject matter expertise for projects in one or more of the following areas: single sign-on (SSO), identity federation,

enterprise directory architecture and design (directory schema, directory services, namespace and replication topology),
resource provisioning, and process integration.
- Familiarity with Identity and access governance including access controls (RBAC, ABAC, PBAC, RAdAC), access request

and certification, user life cycle management processes, and organizational change management.
- Experience auditing IAM infrastructure through account discovery activities with scripting tools, CMDB systems, PAM

discovery tools, stand-alone CIEM tools, CASB tools, and/or SIEM logs.
** What we offer**
- A comprehensive benefits package
- A minimum of 15 paid vacation days
- A lifetime pension
- Flexible work model, depending on your role type
- Training and development courses

PN 2031444
Location: Vancouver, British Columbia, Canada, V6B 5R3
** What else you should know**

any delays.

**Date Posted**:2025-09-08 **Closing Date**:2025-09-29

For internal use 52140290